tours.specia1.com/t/2076?t=51078&aid=147211&sid=e67f1f4a&opt=476d17f408366541&xk=d02110701b1846ab3c371886a862ffaa&clickid=3535609873f3d7add29eeb52019954d2ef158e0f&i18n_country=US&hts_id=a0d224d5-2dff-45b6-b4a1-c11ad9beaaed/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/
313 B URL tours.specia1.com/t/2076?t=51078&aid=147211&sid=e67f1f4a&opt=476d17f408366541&xk=d02110701b1846ab3c371886a862ffaa&clickid=3535609873f3d7add29eeb52019954d2ef158e0f&i18n_country=US&hts_id=a0d224d5-2dff-45b6-b4a1-c11ad9beaaed/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/
IP
File type HTML document text\012- HTML document text\012- HTML document, ASCII text
Hash a2a5cc283e9c6370ba3e0e56a5c15d10
2286987a11e48ba21709cc6b1ee2bea7773e47bf
89df8e9f0811abc868889698e048e110a3581429448843f791a91b1483a3ae8b
GET /t/2076?t=51078&aid=147211&sid=e67f1f4a&opt=476d17f408366541&xk=d02110701b1846ab3c371886a862ffaa&clickid=3535609873f3d7add29eeb52019954d2ef158e0f&i18n_country=US&hts_id=a0d224d5-2dff-45b6-b4a1-c11ad9beaaed/t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076//t/2076/ HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Upgrade-Insecure-Requests: 1
Connection: keep-alive
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
content-type: text/html; charset=utf-8
content-length: 313
x-amz-error-code: Found
x-amz-error-message: Resource Found
location: /t/2076/
date: Fri, 24 Nov 2023 04:49:56 GMT
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: mEn3519lzFbtTSFoxO0DoA0OtdVjrMkETmv73-jNRfI6Zhr7wERSsw==
age: 61
X-Firefox-Spdy: h2
tours.specia1.com/t/common/js/opticks.js
879 B URL tours.specia1.com/t/common/js/opticks.js
IP
Hash ac06e12242ff3ce25969e983f7829d72
2566b4908ee175aa98de902093e41a1082d8681d
720c65cbe1bdca394f267cf306f21558ff6b34d1b55a70c63b919ac8096219fa
GET /t/common/js/opticks.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 879
last-modified: Wed, 22 Nov 2023 18:11:56 GMT
server: AmazonS3
date: Fri, 24 Nov 2023 04:49:57 GMT
etag: "ac06e12242ff3ce25969e983f7829d72"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: Ncxa7A3U8mgU7ZJ6TN6On_2iRG73oImweKTg9D0CieA9LHJwmQcM6A==
age: 225
X-Firefox-Spdy: h2
utl-1.com/1.6.20/utl.min.js
307 kB URL utl-1.com/1.6.20/utl.min.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Size 307 kB (307271 bytes)
Hash 16abec94a42aa716dd831a52bca3b1b7
35ccd145a5ddeb1556c8995668b137769f3f4f3e
d2edbef8944e5e94cd67c37b0a6960841eacb87327c493790313ca2870feac34
GET /1.6.20/utl.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 307271
date: Tue, 18 Jul 2023 01:02:18 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "16abec94a42aa716dd831a52bca3b1b7"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: h-ECbRYg75X6rSdxmhgUlOaXO2Ua6Nx24e9skTF9Agqt3ej2TqjwHQ==
age: 11159320
X-Firefox-Spdy: h2
utl-1.com/1.6.20/mst2.min.js
18 kB URL utl-1.com/1.6.20/mst2.min.js
IP
File type ASCII text, with very long lines (17707), with no line terminators
Hash 1ce673324943ed678ec7908cf7815cab
43bb8e53ec84a337356b04e3a63c15d96b3b729c
863efe6006e4a42f8b6312fc39d79c2aa4c22ce3d1fc845122a064779a26a74e
GET /1.6.20/mst2.min.js HTTP/1.1
Host: utl-1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
content-length: 17707
date: Mon, 30 Oct 2023 00:44:09 GMT
last-modified: Mon, 06 Apr 2020 12:48:16 GMT
etag: "1ce673324943ed678ec7908cf7815cab"
accept-ranges: bytes
server: AmazonS3
x-cache: Hit from cloudfront
via: 1.1 142be88a35733307a5e7de05da0a20b8.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: 7ZeoTmc0l2wAkrL8i93JpTWxNoW7khmYYwmroK8IVNiYPht4A6BfKg==
age: 2174808
X-Firefox-Spdy: h2
tours.specia1.com/t/common/js/backtoMA.js
1.0 kB URL tours.specia1.com/t/common/js/backtoMA.js
IP
File type gzip compressed data, from Unix\012- data
Hash b602c35b9332e2b127c0fac410df97f7
6665fe1e25fb625b40e0f41ccab73d54cc0b7970
82f1baf331621c2b10e846d1df5f2c98a24e544d8eaa7eb6b49c5c82a8f74476
GET /t/common/js/backtoMA.js HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/t/2076/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
last-modified: Wed, 22 Nov 2023 18:11:56 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 24 Nov 2023 04:49:57 GMT
etag: W/"5f30069ddc3b11beee672a38b6e6e38f"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: y-Ozt5vIgTS0INDeyBcdvOIuCV-evzn2qf-1We-pmG7MH7-Nmhn5XQ==
age: 225
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/chat.svg
533 B URL cdn.tours-78-94.wellhello.com/sinder/img/chat.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators
Hash 2ca57f1f2de2549720696a42a551b662
ce846ed07a3622f5280e930e46dd1e7fad183451
adaa303330a1370d61dc665a931abefae43be83e80b58c5477c51d246ee58b9e
GET /sinder/img/chat.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Wed, 20 Sep 2023 23:01:30 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dwgKSLGKzYymKx1e_Uc5_5fCGJKVk0rziQA-xZtajeXENSGLGgBZmw==
age: 5550568
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/girls.png
15 kB URL cdn.tours-78-94.wellhello.com/sinder/img/girls.png
IP
File type PNG image data, 279 x 127, 8-bit colormap, non-interlaced\012- data
Hash adeeb4e0a822bb522625c1953bab8490
7bd5ab07c3de7b4abdc851b3236ccab421f85a07
fbf3ddcc142e33e097c583a0eb5933e3e8a9ac0fc5c56054cb64ddf11762d078
GET /sinder/img/girls.png HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 14564
date: Sun, 01 Oct 2023 00:34:19 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-38e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: y7DYewnHwtv05ZVHre8GEmS_5E7aAlIlca3G8wpqnIzMt5WTsbpVPg==
age: 4680999
X-Firefox-Spdy: h2
tours.specia1.com/t/2076/
20 kB URL tours.specia1.com/t/2076/
IP
File type gzip compressed data, from Unix\012- data
Hash 3ad097f2942939a782ff1c600242c348
4c38fc96c438c98b6a3edc90de4a7a309c24ae15
900110c405b1222b4cba753bb3122aa4897e6d3ab5da977791a042cb27b445a6
GET /t/2076/ HTTP/1.1
Host: tours.specia1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/html
last-modified: Wed, 22 Nov 2023 18:10:04 GMT
server: AmazonS3
content-encoding: gzip
date: Fri, 24 Nov 2023 04:49:57 GMT
etag: W/"916202d9ffea4ac7446909d1015cbb2b"
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 41dc61beb3fe8e8c2c299a2522d8330c.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-C1
x-amz-cf-id: b-awt_N7EStUT-RUpbKoa0NwPQpzpFFPbfbiEeXMU-ZCkEU6L3ZoLw==
age: 157
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg
228 B URL cdn.tours-78-94.wellhello.com/sinder/img/arrow.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with no line terminators
Hash b9fa204329eb7174e9f771e34c7f3c53
1a11918d8529692b7b734f0b82c747f50bb69095
fe8fc656bd4bd41a636c489d1978ee2394d49068675184eeb43f1e0b0b945674
GET /sinder/img/arrow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 228
date: Fri, 10 Nov 2023 23:32:02 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-e4"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BxLCJHxU1cH1qzP2behfTJorpkLu3S3szciqvUQiyr-4wAo-rR77PQ==
age: 1142336
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg
295 B URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-shadow.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with no line terminators
Hash 39084aa4edef89de7e0620722650e213
6bcf1794e842a6a945913ca8b610d634eb829dda
1406e8ad5a6f490d35e424539bb837841bf4dff4c885426b282ee750e0ccc45e
GET /sinder/img/map-pin-shadow.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 295
date: Sun, 06 Aug 2023 19:49:04 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-127"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: zcRAx8f_xzGKNip06QQ58HqouCuaRMcXC5yyuf1iexR_tJNpw2xZGg==
age: 9450114
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg
533 B URL cdn.tours-78-94.wellhello.com/sinder/img/chat-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (533), with no line terminators
Hash a69b89d9307f487ed58a41903f39bc0b
29e29802b95b0098be7525ba48f0ba9081bd5831
e2236170593ba1fc8095c6e61ed3fe443cd8d5247018d91211c00e7f2ab87b6d
GET /sinder/img/chat-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 533
date: Sat, 11 Nov 2023 01:47:40 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-215"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: iRjUa1n6HYvh_6FYcWlQEPXgRJfiMO7R_fWHDFUWVUBhK5fIxafW0Q==
age: 1134198
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg
712 B URL cdn.tours-78-94.wellhello.com/sinder/img/no-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (712), with no line terminators
Hash 9e940a031b4f0ad4721344ae81026a63
a915a8819a84fe4706e4b89d21a16e4f57a06e6f
ac014bf5225347be767bd63c85977fb9fd99fe6ba5cb045a0ee7368dd0fdb35f
GET /sinder/img/no-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 712
date: Thu, 11 May 2023 23:33:41 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c8"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Z9VfIsacOw9Iej-6RTNdY7nZBqRU7T7lBb8QjMyC1N7iFnDrwt1oQA==
age: 16953437
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg
704 B URL cdn.tours-78-94.wellhello.com/sinder/img/yes-off.svg
IP
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (704), with no line terminators
Hash a4eb7ee2185fc85fa10c0e0a591e800b
ebebbe8a12ef952effe3c88b7062caad8c7cffaf
59027987947a695716751edf6b21fe1ac1bf21dcb6b360443e075d166328a2c0
GET /sinder/img/yes-off.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 704
date: Thu, 12 Oct 2023 04:13:50 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-2c0"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ma6AxI7aU_LjBqKfOw45W4MCTdQUjY-06ueivG9thmDNge9j5teMgg==
age: 3717428
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/no.svg
862 B URL cdn.tours-78-94.wellhello.com/sinder/img/no.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (862), with no line terminators
Hash 65eeb52762bc89d879f3d7180fc2d976
064a0f1def0fff5b98cf82d86cd31e9a8acd78a7
95b1c99567d61185d7884b4ea9b285f849bfb46318b285cd2b25826fad57b1af
GET /sinder/img/no.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 862
date: Wed, 04 Jan 2023 01:00:11 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-35e"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: oT0HrqqDBmYNzlGGX3FeImVQPNjkEmcmyMqGnGMizzrITdiDbJGdEQ==
age: 28007447
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/yes.svg
893 B URL cdn.tours-78-94.wellhello.com/sinder/img/yes.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (893), with no line terminators
Hash 655cbe97d7ed34e8462504d7dae81b90
6fb3d056070d7e51032165913dab1721057d095d
5dda8e5ceb3f5f0cc9b274f97eff322d63d9917a39ca42f3a24412e3518c5b2a
GET /sinder/img/yes.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 893
date: Thu, 27 Apr 2023 23:21:10 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: "6308fd73-37d"
accept-ranges: bytes
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AczRvrmIhdRNtas3uuJhEDNLZFYCsjjFJ-rMsu0u0x1O8R3qSq7VVg==
age: 18163788
X-Firefox-Spdy: h2
cl0udh0st1ng.com/bo.js
2.4 kB IP
Hash bc019f3a8a5e44e157b0ec4eb6586f1f
13650f4a446d40c055b51724996c2d1481a7364e
962b1c11423ab56de082a5eb493ae1b6840eedb1b539e014f8becdda4ec1db43
GET /bo.js HTTP/1.1
Host: cl0udh0st1ng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:50:57 GMT
content-type: text/plain
etag: W/"6554da0f-1029"
last-modified: Wed, 15 Nov 2023 14:47:43 GMT
cache-control: max-age=14400
cf-cache-status: HIT
age: 3940
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=7R7IamIEOvhouVPO%2FKzjRx%2BUWCRTK6Z%2FtA9Z5MYTwHOHViIfQbIVhYevcjlfrtmprl4ZJQ1Jh6lN4nzmw80aXETj1weAoUQzD7BV5C4F7GqU5xMAIrFoppQsEIMyI8wuP5Rd"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 82af08b7be251c06-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400
X-Firefox-Spdy: h2
cdn.izooto.com/scripts/sdk/izooto.js
77 kB URL cdn.izooto.com/scripts/sdk/izooto.js
IP
File type ASCII text, with very long lines (65536), with no line terminators
Hash d4b1792254dde3e59c430ba3cff4893e
f49fb2e5d4acffd1244a979834bb0825bd362faa
f00a9218ffcc6e712ca701be8fd9fb9d7ad59d33155551c758055a6a3e0ff39d
GET /scripts/sdk/izooto.js HTTP/1.1
Host: cdn.izooto.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:50:58 GMT
content-type: application/javascript
access-control-allow-origin: *
cf-bgj: minify
etag: W/"655dcf47-5033d"
last-modified: Wed, 22 Nov 2023 09:52:07 GMT
vary: Accept-Encoding
x-xss-protection: 1; mode=block
cf-cache-status: HIT
age: 154687
expires: Sun, 10 Dec 2023 04:50:58 GMT
cache-control: public, max-age=1382400
server: cloudflare
cf-ray: 82af08bdbe79b518-OSL
content-encoding: br
X-Firefox-Spdy: h2
secure.authbill.com/tour/api.php
56 B URL secure.authbill.com/tour/api.php
IP
File type ASCII text, with no line terminators
Hash 5d3d98cdda5294d455ac4893e412797e
ed464c9858e314d4c17da6f7e7d8525e0cfe177a
d2e6286d2f54664fdc7f590f3dfb9508e53e2d42e8a5c4a9fe87682c03ca9b8b
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 39
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
set-cookie: PHPSESSID=74D2~4092f33d15eadc46ca37395b80756b2e; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
vary: Accept-Encoding
content-encoding: gzip
content-length: 56
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
secure.authbill.com/tour/api.php
385 B URL secure.authbill.com/tour/api.php
IP
File type JSON data\012- , ASCII text, with very long lines (804), with no line terminators
Hash bce6e7d4e86b43a5efb98cfca2052559
3c6f6fd27e7f56b8aaaab4fde88f14a9a69f78a2
a1e3faf2c39efe278d1fbf640b833680842d2d71f275cd5ddda345793badf629
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 41
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
set-cookie: PHPSESSID=4DD2~5d9e5b96ab08113de79861bbb4b5f95c; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
vary: Accept-Encoding
content-encoding: gzip
content-length: 385
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
secure.authbill.com/tour/api.php
21 B URL secure.authbill.com/tour/api.php
IP
File type very short file (no magic)
Hash cfcd208495d565ef66e7dff9f98764da
b6589fc6ab0dc82cf12099d1c2d40ab994e8410c
5feceb66ffc86f38d952786c6d696c79c2dbc239dd4e91b46729d73a27fb57e9
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 61
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
set-cookie: PHPSESSID=120F~62c9b87e4909c4bcdb0c3d91ebc0446c; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
vary: Accept-Encoding
content-encoding: gzip
content-length: 21
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
runsafeads.com/j/4898409d9693b180bc
61 kB URL runsafeads.com/j/4898409d9693b180bc
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type ASCII text, with very long lines (65536), with no line terminators
Hash fcbdf7a905939d020f52ddb510f0ca32
cb27994d41cc2c9ba3ac64b682218afb462c2310
be457012ee2e9a83b7d210c00a70d873dade0617c0ce4b62a899cc555d2f0d10
GET /j/4898409d9693b180bc HTTP/1.1
Host: runsafeads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:50:58 GMT
etag: 7f4beacb65602bb2e2d1046cb3b7fd94--gzip
cache-control: private, max-age=0, no-cache, must-revalidate
pragma: no-cache
accept-ch: Width, Viewport-Width, Viewport-Height, Device-Memory, Content-DPR, DPR, Save-Data, Downlink, ECT, RTT, Sec-CH-UA, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor
content-type: text/javascript;charset=utf-8
vary: Accept-Encoding, User-Agent
content-encoding: gzip
X-Firefox-Spdy: h2
secure.authbill.com/tour/api.php
160 B URL secure.authbill.com/tour/api.php
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0278b19bdbb80bbc76eeed7eeb6e41fd
5d42db78b5f2ba4485e083884c6a21fc5f361d90
acc2152313d9f6eec0668ea0436e908bf386eb6a318411f928d38feac165f14d
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 31
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
set-cookie: PHPSESSID=74D2~9a6c4efcebe0b2b73dd9f6803e69a6da; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
vary: Accept-Encoding
content-encoding: gzip
content-length: 160
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
secure.authbill.com/tour/api.php
160 B URL secure.authbill.com/tour/api.php
IP
File type JSON data\012- , ASCII text, with no line terminators
Hash 0278b19bdbb80bbc76eeed7eeb6e41fd
5d42db78b5f2ba4485e083884c6a21fc5f361d90
acc2152313d9f6eec0668ea0436e908bf386eb6a318411f928d38feac165f14d
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 31
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
set-cookie: PHPSESSID=D420~5c6a75f06cd1f1450445a76f72aa4397; path=/; secure; HttpOnly
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
vary: Accept-Encoding
content-encoding: gzip
content-length: 160
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
secure.authbill.com/tour/api.php
20 B URL secure.authbill.com/tour/api.php
IP
File type gzip compressed data, from Unix\012- data
Hash 7029066c27ac6f5ef18d660d5741979a
46c6643f07aa7f6bfe7118de926b86defc5087c4
59869db34853933b239f1e2219cf7d431da006aa919635478511fabbfc8849d2
POST /tour/api.php HTTP/1.1
Host: secure.authbill.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
Content-Length: 181
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
server: Apache
expires: Thu, 19 Nov 1981 08:52:00 GMT
cache-control: no-store, no-cache, must-revalidate, post-check=0, pre-check=0
pragma: no-cache
access-control-allow-origin: *
access-control-allow-methods: POST, GET, OPTIONS
access-control-allow-headers: X-Requested-With, content-type
set-cookie: PHPSESSID=4DD2~28637d0449bb8d684f644ba87ad98469; path=/; secure; HttpOnly
bd_ovtu=11; expires=Sat, 25-Nov-2023 04:50:59 GMT; Max-Age=86400; path=/; domain=.authbill.com
vary: Accept-Encoding
content-encoding: gzip
content-length: 20
content-type: text/html; charset=UTF-8
x-content-type-options: nosniff
runsafeads.com/h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1700801461846&_t1=1700801462209&_t2=1700801462209&_optpsY8gMSZN4gw=8fbb0c7c&_m=1uc
1.2 kB URL runsafeads.com/h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1700801461846&_t1=1700801462209&_t2=1700801462209&_optpsY8gMSZN4gw=8fbb0c7c&_m=1uc
IP
ASN #60781 LeaseWeb Netherlands B.V.
File type JSON data\012- , ASCII text, with very long lines (1167), with no line terminators
Hash 2dd6c5d0f240214c04d81d9838e4652e
617e1899a72d43b9fb050b32bbafe289bc89f6d9
e0d533139376f5ae82d93f77a1a341a15606c42881e44e4a5c96c505e9953166
POST /h/4898409d9693b180bc?opticks-url=https%3A%2F%2Ftours.specia1.com%2Ft%2F2076%2F&response-opticks-version=v3&_t0=1700801461846&_t1=1700801462209&_t2=1700801462209&_optpsY8gMSZN4gw=8fbb0c7c&_m=1uc HTTP/1.1
Host: runsafeads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tours.specia1.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 2766
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:50:59 GMT
cache-control: private, max-age=0, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
content-type: application/json
vary: Accept-Encoding, User-Agent
content-length: 1167
X-Firefox-Spdy: h2
runsafeads.com/p
0 B IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
POST /p HTTP/1.1
Host: runsafeads.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://tours.specia1.com/
Content-Type: text/plain
Content-Length: 136
Origin: https://tours.specia1.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
access-control-allow-credentials: true
access-control-allow-origin: https://tours.specia1.com
content-encoding: identity
content-length: 0
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/js/custom.min.js
1.3 kB URL cdn.tours-78-94.wellhello.com/sinder/js/custom.min.js
IP
File type ASCII text, with very long lines (3983), with no line terminators
Hash cc73ad6b87772973001c56ece2847677
80ad836fc5851ea494b7210f42bcd9fbaf665348
3dadf023636d53d3c0d83b1be377855cc0c17cb76852efb8b6b35b05bbbc6946
GET /sinder/js/custom.min.js HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript
date: Thu, 27 Jul 2023 00:42:02 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-f8f"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0g-_FJCJXubjXqHA-GKtMH9qsqT_oDqp4jL8M5ImQTfyS126OgwsQA==
age: 10382936
X-Firefox-Spdy: h2
moartraffic.engine.adglare.net/favicon.ico
0 B URL moartraffic.engine.adglare.net/favicon.ico
IP
ASN #60781 LeaseWeb Netherlands B.V.
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /favicon.ico HTTP/1.1
Host: moartraffic.engine.adglare.net
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/?334095376=&ag_custom_moaraid=&ag_custom_moart=53940&ag_custom_moarsid=&ag_custom_moarclickid=&ag_custom_moarhtsid=e580e2fd-d135-459f-9734-c34bc031c96f&ag_custom_moarpid=&ag_custom_moaruserid=&ag_custom_moarhx=&ag_custom_moaremail=&xk=c0a1202090707070ad222b14ab63026b&click_id=track_20231124045058_e4da0e00_a590_468d_80e8_99f0e3ed8a49&i18n_country=NO&hts_id=e580e2fd-d135-459f-9734-c34bc031c96f
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-origin
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 404 Not Found
date: Fri, 24 Nov 2023 04:51:00 GMT
content-type: image/x-icon
content-length: 0
X-Firefox-Spdy: h2
ocsp.r2m03.amazontrust.com/
471 B URL ocsp.r2m03.amazontrust.com/
IP
Hash 882cf5689219cc1c162cc1c322e594a2
f2c3b661cc6afef562c339d96e078172953bee73
a99565e38c1e9bb95c7f286a6b106acc373fb5c535789b13896dd0882379ebdf
POST / HTTP/1.1
Host: ocsp.r2m03.amazontrust.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Content-Length: 471
Connection: keep-alive
Cache-Control: max-age=7200
Date: Fri, 24 Nov 2023 04:51:00 GMT
Server: ECAcc (amb/6AE8)
X-Cache: Miss from cloudfront
Via: 1.1 a9120cc3ff449047c990e82a4d5566ba.cloudfront.net (CloudFront)
X-Amz-Cf-Pop: OSL50-C1
X-Amz-Cf-Id: r4LtieC6PZyXzGPPZU-O3Jq-tQ4o0lbIttxUagnyTQ_63-Szg3LWgg==
go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=e580e2fd-d135-459f-9734-c34bc031c96f&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKCsiOCMzNj8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY0KDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmVXF9Z3A1KTt8fH9ofmskKSZqaHZxYXY0N3t8fys7J2d3cGBodjAyNXBrdHV3bHMnKjFlfX58YGV2cTsiMTAlNXB0f1trfXV3enJ3OyIxen1jdXUpWDZEPGZnYndqNmBibHRsZyIqend-MHU._e8863e3a
302 Found 572 B URL User Request GET HTTP/2 go.moartraffic.com/go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=e580e2fd-d135-459f-9734-c34bc031c96f&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKCsiOCMzNj8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY0KDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmVXF9Z3A1KTt8fH9ofmskKSZqaHZxYXY0N3t8fys7J2d3cGBodjAyNXBrdHV3bHMnKjFlfX58YGV2cTsiMTAlNXB0f1trfXV3enJ3OyIxen1jdXUpWDZEPGZnYndqNmBibHRsZyIqend-MHU._e8863e3a
IP
Certificate IssuerLet's Encrypt
Subjectgo.moartraffic.com
Fingerprint91:FF:37:7A:D8:9C:D1:52:28:CF:20:BD:36:CF:BA:AC:85:D4:DD:6A
ValidityWed, 11 Oct 2023 10:45:06 GMT - Tue, 09 Jan 2024 10:45:05 GMT
File type HTML document, ASCII text, with very long lines (572), with no line terminators
Hash 7162c70f5ecdeab4486104491fbb5682
e887376e184620c003f8d321fd060816dcf622b2
8e3689320e1e40f522dd832572baac72733c9c3559dffc398217b62a3b4fde5a
GET /go.php?t=55036&aid=&sid=_BIDCreative%3A+240429687&hts_id=e580e2fd-d135-459f-9734-c34bc031c96f&product_id=&agcid=fTFwa1FXMDIhPS0pKiE-Iz0qMWdQXDEoKiU2ISggIDwlNiQ_JnpqWlYqLScrLCMmOy4zPiQmNTpne21lJyM6ITAlNX9PVyYjKyAmOC4wKi8lPit0aW9wb0ZsYDAyJjIpKCsiOCMzNj8mcGgxKCouNDchIzw9JSs3JjA7NDFxZ2JrbWpqc2t1dzUxPjtWXEAqOyd9fWV7anInPDF0ejo_MGplam5rdmArLSdAenZ8fnxqKCY0KDYjMCU1aWd9Y2x5dHcqLSd8djE-K3h2JCkmVXF9Z3A1KTt8fH9ofmskKSZqaHZxYXY0N3t8fys7J2d3cGBodjAyNXBrdHV3bHMnKjFlfX58YGV2cTsiMTAlNXB0f1trfXV3enJ3OyIxen1jdXUpWDZEPGZnYndqNmBibHRsZyIqend-MHU._e8863e3a HTTP/1.1
Host: go.moartraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://moartraffic.engine.adglare.net/
Cookie: bdreff=https%3A%2F%2Ftours.specia1.com%2F; tour=53940; bdcounter=1; xk=c0a1202090707070ad222b14ab63026b
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Fri, 24 Nov 2023 04:51:00 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://t.ajump1.com/2779/4551?aff_click_id=61099636-c5a3-4400-ad92-0ff80f96befe&source=55036+&xk=c0a1202090707070ad222b14ab63026b&hts_id=61099636-c5a3-4400-ad92-0ff80f96befe&i18n_country=NO
p3p: CP="NOI ADM DEV COM NAV OUR STP"
server: nginx
set-cookie: bd_ovtu=1; expires=Sat, 25-Nov-2023 04:51:00 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
bdreff=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F; expires=Wed, 22-May-2024 04:51:00 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
tour=55036; expires=Wed, 22-May-2024 04:51:00 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
bdcounter=2; expires=Sat, 25-Nov-2023 04:51:00 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
xk=c0a1202090707070ad222b14ab63026b; expires=Wed, 22-May-2024 04:51:00 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
x-powered-by: PHP/8.1.19
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
X-Firefox-Spdy: h2
go.moartraffic.com/go.php?t=53939&aid=&sid=&clickid=&click_id=track_20231124045058_e4da0e00_a590_468d_80e8_99f0e3ed8a49&user_id=&hx=&product_id=&hts_id=&email=
850 B URL go.moartraffic.com/go.php?t=53939&aid=&sid=&clickid=&click_id=track_20231124045058_e4da0e00_a590_468d_80e8_99f0e3ed8a49&user_id=&hx=&product_id=&hts_id=&email=
IP
Certificate IssuerLet's Encrypt
Subjectgo.moartraffic.com
Fingerprint91:FF:37:7A:D8:9C:D1:52:28:CF:20:BD:36:CF:BA:AC:85:D4:DD:6A
ValidityWed, 11 Oct 2023 10:45:06 GMT - Tue, 09 Jan 2024 10:45:05 GMT
Hash 906be45ced50ea81a720dd467711402e
c2b37dad9b8b830afb484d7f4c90c80d59cdb19f
a3539bef2f0e7cc5b0acee372a742339217b7cece62a0e3167a378fb60afaf5d
GET /go.php?t=53939&aid=&sid=&clickid=&click_id=track_20231124045058_e4da0e00_a590_468d_80e8_99f0e3ed8a49&user_id=&hx=&product_id=&hts_id=&email= HTTP/1.1
Host: go.moartraffic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 302 Found
cache-control: no-store, no-cache, must-revalidate
content-type: text/html; charset=UTF-8
date: Fri, 24 Nov 2023 04:51:00 GMT
expires: Thu, 01 Jan 1970 00:00:00 GMT
location: https://moartraffic.engine.adglare.net/?334095376=&ag_custom_moaraid=&ag_custom_moart=53940&ag_custom_moarsid=&ag_custom_moarclickid=&ag_custom_moarhtsid=e580e2fd-d135-459f-9734-c34bc031c96f&ag_custom_moarpid=&ag_custom_moaruserid=&ag_custom_moarhx=&ag_custom_moaremail=&xk=c0a1202090707070ad222b14ab63026b&click_id=track_20231124045058_e4da0e00_a590_468d_80e8_99f0e3ed8a49&i18n_country=NO&hts_id=e580e2fd-d135-459f-9734-c34bc031c96f
p3p: CP="NOI ADM DEV COM NAV OUR STP"
server: nginx
set-cookie: bdreff=https%3A%2F%2Ftours.specia1.com%2F; expires=Wed, 22-May-2024 04:50:59 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
tour=53940; expires=Wed, 22-May-2024 04:50:59 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
bdcounter=1; expires=Sat, 25-Nov-2023 04:50:59 GMT; Max-Age=86400; path=/; domain=.moartraffic.com
xk=c0a1202090707070ad222b14ab63026b; expires=Wed, 22-May-2024 04:50:59 GMT; Max-Age=15552000; path=/; domain=.moartraffic.com
x-powered-by: PHP/8.1.19
x-robots-tag: otherbot: noindex, nofollow, googlebot: noindex, nofollow
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js
200 OK 42 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/framework-106f20edc271d368.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 2d3a5b25cf92243157319955d2903093
51b8322a5bed1a7ceaad6da2af45e8ad5cfd90e4
81db2acd47fb90b05f8f0b585acf356b1bd9676bd2094468e8f4331d6ff7ef8f
GET /cno/_next/static/chunks/framework-106f20edc271d368.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 42169
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJiXcIAMESgA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1fbc1-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0Nqr-ltYZ-pDQNhOG2DKQ9mB29dixcUT4NPG76lfzAhNOaolPCHnDw==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg
200 OK 801 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/d3000c5fa6/sv.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 3449da9edf360eee1c02f61a92097eed
50bbfb01096e43866c82dcbcd4b86f64005cc904
86b1ebcc35b90ecd70469cbc084d4e9f712b9c078e08ffee11b1c8efae8cc1d7
GET /cmscloud/dA/d3000c5fa6/sv.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 801
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=9CwVdE81pUJMqheIxDR+jAHNiFSE/+5dvN1hvuPuUOJofp5Fj3g/IGJ5/sZKefnADiJ8rH9VZMa/fsVr/khOgAuFphvGsu6w1zUF+CJB8FeRphJFBt1INueV/u/u; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=9CwVdE81pUJMqheIxDR+jAHNiFSE/+5dvN1hvuPuUOJofp5Fj3g/IGJ5/sZKefnADiJ8rH9VZMa/fsVr/khOgAuFphvGsu6w1zUF+CJB8FeRphJFBt1INueV/u/u; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="sv.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:a1f2b483-d964-4946-916f-5fb71ad57787:1619095561000:801
accept-ranges: bytes
apigw-requestid: OkiPJj9IoAMEagA=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ZdW3TMqOgV_QyoXJyKfxqJj-dJTVONCCwgE_CUZgJULd3q1xklGvRg==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg
2.5 kB URL cdn.tours-78-94.wellhello.com/sinder/img/logo-wh2.svg
IP
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (6550), with no line terminators
Hash e638d22e798dfa2b4d96be5d359980eb
b5c5f951a8e85f540136a1c9124a4dabaada3280
7ad1d4e0d2f92ad9b5f5fff97452d370c4b12c184a671f812e5692aaa3c6aa35
GET /sinder/img/logo-wh2.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 27 May 2023 01:47:42 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-177c"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: IB0Qa6IlDJtIHesUV30zwLdbOBHb94e56P4EwL4feN7Ir-94-p8avA==
age: 15649396
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js
200 OK 347 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (614), with no line terminators
Hash 4d3e0aab5c1eecfed530015032013643
95fec99dbbdd57baa1a72f9ec176bba31cf0c2fa
52590ed48342ccc85723243822eafe156a9357a5d14fe081a4e6506067075ecf
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_buildManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 347
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJiv3oAMEVvg=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"266-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 4ztlrhFvNCyYEe1biGTP6QPjE9ZvakkRWv7ONsLxwICocOcxQ38Vkw==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js
200 OK 106 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with no line terminators
Hash 2cf6719bd8f124b159008cce5c44333e
7886848eef64ba935bd8078db5930500d9042c96
6a07aeccbb0fe440f1c7252d96a131039fa79780e7cafeb5355d7d3d9914e55b
GET /cno/_next/static/_H7vFNH_oBuxYbBhMUL_0/_ssgManifest.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 106
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJhvbIAMEV2w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:39 GMT
etag: W/"6a-18b8c07bbd8"
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: FLQkGSS6MW-gJMWB20f2yqtUldYELzw1CMiM23B6LjmbBDQSLv_3jA==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg
200 OK 511 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/82388797bc/fr.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 4223844d00707152d1d197d34da41ec0
cbf955b217a10e667b758cdfc6c6425f92a30384
ed3e5dbeaecd323e1ea4151ee01773314316443029e3d52c2074c293ff974c5e
GET /cmscloud/dA/82388797bc/fr.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 511
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=29+ZvdEyNMf5LvttQgnWf3AWZNR5no/0dsIh4oSt5eYOb52SSLdNYcdmpytx0lJrXurQxDplmxKkHG4NPfPlZZk/+1KFHxvYn9mB/4niXyhbmzqsk5Fe5D306Hri; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=29+ZvdEyNMf5LvttQgnWf3AWZNR5no/0dsIh4oSt5eYOb52SSLdNYcdmpytx0lJrXurQxDplmxKkHG4NPfPlZZk/+1KFHxvYn9mB/4niXyhbmzqsk5Fe5D306Hri; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="fr.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:636dcc91-b503-4cd0-8461-61780376d4a8:1619095561000:511
accept-ranges: bytes
apigw-requestid: OkiPJhhkoAMEVYw=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xhx1xHm1xY-N1QJCmmCE96AVDYFkY6iM7VFeO5OP3CSIIRGF_jE3FQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg
200 OK 885 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/1a5ddf5804/pt.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 5845c7110dd82ec186135455c756cded
fa41f2a59c16509555a251138c6acc82e3cb3932
9d61a554c23ead1b41cd0cdc0f965de15fee48d279e84ef08a737d98f1f4075b
GET /cmscloud/dA/1a5ddf5804/pt.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 885
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=KxZFQ/BXjO0+ujISpQdnvMG34v36y7ayl7BiV0LZBlO1uVbEFQp6tuwJbKBDPbVhQVrV6bnqj+bQu2Bim057TosqLOtVI8Gxwg/ngWh5R1B/5qV103CLueXz89GT; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=KxZFQ/BXjO0+ujISpQdnvMG34v36y7ayl7BiV0LZBlO1uVbEFQp6tuwJbKBDPbVhQVrV6bnqj+bQu2Bim057TosqLOtVI8Gxwg/ngWh5R1B/5qV103CLueXz89GT; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pt.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:93a17bc5-1353-463d-a778-0cfdeae4431f:1619095561000:885
accept-ranges: bytes
apigw-requestid: OkiPJiokIAMEPaw=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 2wr7F_xzFqFMVYm6OLvZntcm0rpWjpyohYY0Dezmt4Si7MayP_soLA==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js
200 OK 20 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/120-7b4fc9d6543c2261.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash 38db4939128d73cb9108e6b350caa02b
8a4bd9d0f20eb4eb01ec6713b0d991b18f52201c
ca2f4e288f1a399592926fcb63373914292d79e02a2572cba3f65184d8da5b0d
GET /cno/_next/static/chunks/120-7b4fc9d6543c2261.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 19891
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJjPnIAMEVZQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12071-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 6LsKNymC_YazHtpVgA4Ud94SL0hjDbOfKWgcyZiJnfGGgBpf-LCUgA==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg
200 OK 664 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/eb4e3ddc66/es.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash bc11181dd1d5465bc75fcec5207e8d6c
d7f860c0673cdc92d921be9439c6a07384d87e58
77c14d9c104c167a5bbd0b2b2bd03d9c0177e2677914656edf7cfd3b7568430d
GET /cmscloud/dA/eb4e3ddc66/es.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 664
date: Wed, 22 Nov 2023 21:23:01 GMT
set-cookie: AWSALB=sWOTiCxti+kSo7UXXY8qX1vHxzNJ0rxs/yh9EDnAQv9uM6LACBjaTViplpmtGDd4y5R5co7FVk+hqq0g0co+fcGjf1mG7cuFQOHk49eHaoErWqcCotp1xLcqH/of; Expires=Wed, 29 Nov 2023 21:23:01 GMT; Path=/
AWSALBCORS=sWOTiCxti+kSo7UXXY8qX1vHxzNJ0rxs/yh9EDnAQv9uM6LACBjaTViplpmtGDd4y5R5co7FVk+hqq0g0co+fcGjf1mG7cuFQOHk49eHaoErWqcCotp1xLcqH/of; Expires=Wed, 29 Nov 2023 21:23:01 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="es.svg"
expires: Thu, 21 Nov 2024 21:23:01 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:2cc6772b-4348-4c9f-993c-7090b64d2a65:1619095561000:664
accept-ranges: bytes
apigw-requestid: O0agcirPIAMEa7w=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: wPSXIg8ZipAaMRwndUrOzZk83lWFPAJE9uipMYpKPQ0H1FlfNX9rwQ==
age: 113280
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg
200 OK 639 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/8970383085/de.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 99d7ec1914cffa444eca58c13c368ad4
def575d0dd1bbbf11d5fed1d2a9bdc238c9d65a7
d1583806f7e1a3a19eee75254decc54f9ef28c1302c2e5c143c6122159c0cc0b
GET /cmscloud/dA/8970383085/de.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 639
date: Wed, 22 Nov 2023 21:23:01 GMT
set-cookie: AWSALB=98XuB57KW7sga2HA2yVAtH+DD52S+GfkQVZ592krw8etoXqZ0I2uhWNHMvJMrfbuc/9ByTq1RTnCmEzqBcdpojQVTFVQ/cbNkbiclymnnL6NMU8KYe426te7XBkS; Expires=Wed, 29 Nov 2023 21:23:01 GMT; Path=/
AWSALBCORS=98XuB57KW7sga2HA2yVAtH+DD52S+GfkQVZ592krw8etoXqZ0I2uhWNHMvJMrfbuc/9ByTq1RTnCmEzqBcdpojQVTFVQ/cbNkbiclymnnL6NMU8KYe426te7XBkS; Expires=Wed, 29 Nov 2023 21:23:01 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="de.svg"
expires: Thu, 21 Nov 2024 21:23:01 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:cac4b43f-8f76-4ac0-bbaa-f29da4e433ba:1619095561000:639
accept-ranges: bytes
apigw-requestid: O0agcj1gIAMEPYg=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vPv1MkurDMwF5OhF7PTbJOBWj2a8Q4DHgttG_qoW7MO07BmcZp872Q==
age: 113280
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css
200 OK 1.2 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/css/981b544153db6743.css
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3871), with no line terminators
Hash a3badfa29764e1a3b42df21af493b19b
bce91474dda23570985b3cb1a2e6a7380a851a7c
020e9d33bb61c27c2f1f2ca4f55de14a064a942384d30dfad596b9f505ff3e8e
GET /cno/_next/static/css/981b544153db6743.css HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/css,*/*;q=0.1
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: style
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: text/css; charset=UTF-8
content-length: 1167
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJjWNIAMEP7w=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f1f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LGA6bxwIZw2cVKzixntpCj8ldXlaMyDBIpgty3mO5am-HD20Qmk4uw==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg
200 OK 496 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/b88578965b/nl.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 88426efa127b09ebc25a22c23e359697
e825251659ba9c799ee1a36d24c7fc9dce7f0ab6
65983dd36bd6b78a3d3a94523390ca56500dfd7f03463720f7c97c799986f018
GET /cmscloud/dA/b88578965b/nl.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 496
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=Cm4opkLQSsdcdbw07evEvDu5y4EqITGcPx7GeWOXyAq5inShvy0YNRmqnAOJLmLcbbbDgmmXcK4K+kOx6eRRRT/k7WIp78tv9LaIGji7enPgllWcUamDxJfXhY3x; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=Cm4opkLQSsdcdbw07evEvDu5y4EqITGcPx7GeWOXyAq5inShvy0YNRmqnAOJLmLcbbbDgmmXcK4K+kOx6eRRRT/k7WIp78tv9LaIGji7enPgllWcUamDxJfXhY3x; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nl.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:8b4a8e7b-ad08-4e12-a81a-31a462b04902:1619095561000:496
accept-ranges: bytes
apigw-requestid: OkiPJgeJIAMESVw=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: xaeqOEq88o07YRMHT63NGtIes2oFzvRU70IMyBKB1vfAVe8W61gk9A==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js
200 OK 30 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/main-37d2def6d34d131a.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Hash e3107c292b526cedac3a31edd3a1bbce
841222f7cdbda89bb73ac7c6db02799afa8a89db
40efec9e042bfda23739659eb0a1a8fc3d566f8fca207572e1c3cdba72f1f4ed
GET /cno/_next/static/chunks/main-37d2def6d34d131a.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 30387
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJjLooAMEPvQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"1950f-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: O0k_MJu3nX3GYyyfiXaahaE_E3i63YOn3sNZd-w9t1kzunwi16FYdg==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js
200 OK 148 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 148 kB (148524 bytes)
Hash fd3640de48800a4644bc86d9f3b8746f
6571c24dc9dc7c1939f9fe0a22fb43ed9d4ef740
c4dd22ecfa5452e6a9b48129ba46850264e78ef2c3f62402106cec7de380b569
GET /cno/_next/static/chunks/pages/_app-d22cba5dce0a9ccb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 148524
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJitRIAMEPeA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"8146b-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: BULKUfCYL8PjCLflnf-OtlWBs9F1UWDCdxKcLsgjp3lOhwuPLqmBFw==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg
42 kB URL cdn.tours-78-94.wellhello.com/sinder/img/map-pin-wh.svg
IP
File type SVG Scalable Vector Graphics image\012- XML 1.0 document text\012- XML document text\012- HTML document text\012- exported SGML document, ASCII text, with very long lines (61480)
Hash fed8df065fcc81a0767b0443c4c19b1b
776631caa25ded6d212277673ed6b0006693dfed
0ab1dac45e6ea977f194cc80a46a1271c005c980f5cb5e19d06f196c7a6f3fce
GET /sinder/img/map-pin-wh.svg HTTP/1.1
Host: cdn.tours-78-94.wellhello.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://tours.specia1.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 21 Apr 2023 17:52:52 GMT
server: nginx
last-modified: Fri, 26 Aug 2022 17:05:55 GMT
etag: W/"6308fd73-fde"
content-encoding: gzip
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 2d5cbe05385a7f3bbffc8a562b8711f6.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: tkQAfQ8aSrIsXzYVUZhhgBWSlexrCAjiOCEVe3dxjM23n4KKU3UJQw==
age: 18701886
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/webpack-5050628ecf47f5fe.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (3863), with no line terminators
Hash a4a56c3572810f804232da971c7b5822
6f6561818e6155ab8543c64d22d9ee10f904622d
adca7e781cb926a3e8339e95b6f09253b596764844e4878ba78c7a3ce7e9bc61
GET /cno/_next/static/chunks/webpack-5050628ecf47f5fe.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1953
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPLjw-oAMES8Q=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"f17-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 9f8yhXSzYlhfic3I8y8JBkipGs0zKFZGnAfc5Yk-3BncBre4IlytVg==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg
200 OK 498 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/19ebcd0fbe/it.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 7dc8917a7068b1fd01c3ac35618cc818
aa9de0296e734d80f1fb1e9ec397cd8e086c916a
2cd8d86729bd8c6ef297d4026d73c8990ec6df85c8e7ffec376cac38d5963175
GET /cmscloud/dA/19ebcd0fbe/it.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 498
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="it.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
etag: dot:bff2d52f-dc33-4db5-aa64-d1d3d48a28af:1619095561000:498
accept-ranges: bytes
apigw-requestid: OkiPJh8tIAMESyA=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cyqtq6cfgU3dtH9iAwdHs88W96sF9xtWhRhDbNhhhcOEwSuDeFf5YQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg
200 OK 3.6 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/jerkmate-logo.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4429)
Hash 63bd4d06abcc17b960a84e9d4cad707f
3ed5674bb842e76495f3c6374a2d331239725930
f0eb97c1af10efcbd66d57b8ee1d3bfb75df50c02714defc76c1e539510077f7
GET /cno/assets/cno/jerkmate-logo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3555
date: Fri, 24 Nov 2023 04:51:01 GMT
server: nginx/1.17.8
apigw-requestid: O4vEehS8IAMEVWw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"27fb-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: grqTueTr5MpOj-9KV3_CWEKVrvph89GVETAz2pt8ymwRRdXqR0gQoQ==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/copyright/asacp.png
200 OK 1.7 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/copyright/asacp.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 40 x 20, 8-bit colormap, non-interlaced\012- data
Hash f6ff6eaa0c8129ee9ddc6cfc031cfdce
f68f2920f1f56a5b1e0d1d09028c0acb2cfa8fc0
26e2c90b392d1986bd8e662d48385bd4de47aaf1602cbdc8da562b15b76ed7d7
GET /cno/images/copyright/asacp.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1668
date: Fri, 24 Nov 2023 04:51:02 GMT
server: nginx/1.17.8
apigw-requestid: O4vEfgFooAMESkg=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"684-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: f1UutgZG2lcY6oMxAgHl8Asrt2-Dd3C0LtiZFJ72jvM6yfqTHEmY-w==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/copyright/rta.jpg
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/copyright/rta.jpg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 40x20, components 3\012- data
Hash 8be0a11d05f28033c145ac44ed811c54
9b70e400380447a1d3454157df4d704516765c07
500609be0c6b4ea773c4c10087f549410014bf4e35d483d3b4dce284d6ce035d
GET /cno/images/copyright/rta.jpg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 1056
date: Fri, 24 Nov 2023 04:51:02 GMT
server: nginx/1.17.8
apigw-requestid: O4vEfjHAoAMEPQw=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"420-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: PQYAwOEWMeyFoAf0blqgiYM7fQM_A7644AU2WOHuryyNa9RXlZIv5g==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg
200 OK 3.7 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/jerkmate-logo-stacked.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (4413)
Hash 189c355d8f8bf8f87cedb5e4286be3da
c3ac730a0b9b21019e051333653cd0bc2c520b42
3018ee238018f1090d7df5849e7114619d18654c14b3ebd781503c88466b01aa
GET /cno/assets/cno/jerkmate-logo-stacked.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 3674
date: Fri, 24 Nov 2023 04:51:02 GMT
server: nginx/1.17.8
apigw-requestid: O4vEfjz7IAMEVIQ=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"2834-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 0lIswfjJgHaGb7-s8QfTz7ya2MNOpL4VcBwVmS5R09F4Xa6KdPKIcA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
200 OK 48 kB URL GET HTTP/2 hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (47550), with no line terminators
Hash 930adae67545064bc14c6678361c0974
b441eaaac3118e44f3b1300fbdf9bd9d95b046e4
35598acd20349e1fe6a84aad36121c51589e7017a8855ccd3a2409479cdd7d72
GET /delivery/idsync/idsync.min.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:51:02 GMT
content-type: application/javascript
content-length: 47557
last-modified: Thu, 02 Mar 2023 15:50:17 GMT
expires: Wed, 28 Feb 2024 06:16:08 GMT
cache-control: max-age=10385753
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6577-1-39046-h-0-0---;7100-37-27876----0-0-0
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg
200 OK 386 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/icon-audio-muted.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document text\012- HTML document, ASCII text, with very long lines (700), with no line terminators
Hash 2ab61911c119f36840449016fb7ca986
076e0e793f0af5168bf09e1f1d6a362ed5483974
cda3148abe6b7dadff8ca9e980754152b5ef277baf4d3eefe8b143a0115c4c8e
GET /cno/images/svg/icon-audio-muted.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 386
date: Fri, 24 Nov 2023 04:51:02 GMT
server: nginx/1.17.8
apigw-requestid: O4vEmiZsoAMEPNA=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
etag: W/"2bc-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: B17dbs87PReIyrL7lW1OuRXHCq1PbPLXaOz3i8BvKYfY8PeRmBn_Mw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/close.svg
200 OK 278 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/close.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text
Hash 375233a30c002a4d0069648c5d4adbb2
54d4592ac2c5d2c56f02372677433ed780efd8a8
a6d45b55c729895b6800dcdf3c403e68a5f32b1735ab04e8f2fe7bf204ae9150
GET /cno/images/svg/close.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 278
date: Fri, 24 Nov 2023 04:51:02 GMT
server: nginx/1.17.8
apigw-requestid: O4vEnjCqIAMEaMg=
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
etag: W/"1cc-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: LzE1D-_tQcbtp9mroWtgQrYNmrKvq5LPaqrFu28sYatgb_7Y_pyWVw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 19408
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 19408
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2
200 OK 97 kB URL GET HTTP/2 www.googletagmanager.com/gtm.js?id=GTM-W8XR2C2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (33883)
Hash 76670082f0e7f9ec979fc58415a9f0f8
f89b6d93558b22d6f78d6514391c6e2799f34531
bbd80ae0fa4d1b0f073f3f73f9a18cae73d755ec501d3c5fd6fd2feccfb84ae7
GET /gtm.js?id=GTM-W8XR2C2 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Nov 2023 04:51:02 GMT
expires: Fri, 24 Nov 2023 04:51:02 GMT
cache-control: private, max-age=900
last-modified: Fri, 24 Nov 2023 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 97006
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js
200 OK 783 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/847.9f6fd81aab105eac.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (1576), with no line terminators
Hash 5d8d02ecf0f97eb59ac9fc597dc67fb1
145e952729a03299cfbbab027e998116f78ba68b
8a59940b637b518327794005200a1375533b191c9584bc3111314cbdbacd196b
GET /cno/_next/static/chunks/847.9f6fd81aab105eac.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 783
date: Sat, 18 Nov 2023 01:45:18 GMT
server: nginx/1.17.8
apigw-requestid: OkiPTg48oAMESCQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"628-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eZo13RyWzgK-t8yUBtmlaNmrfHgFDDAuPjoPgQKVhKWMmpfCIpYG5g==
age: 529545
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js
200 OK 2.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/33.07dc177144c3cd24.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (6070), with no line terminators
Hash b0f3bf1018053a8db03e91f78cd691df
e57721f85009a44ee9c952c67b775d4d463ddeed
a5a2971d05f637d789cf7568e681958f47d22fb77b067976196841ae74f1cfba
GET /cno/_next/static/chunks/33.07dc177144c3cd24.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2091
date: Wed, 22 Nov 2023 02:34:50 GMT
server: nginx/1.17.8
apigw-requestid: Ox1Psg0SIAMEVEQ=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"17b6-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: rPjGqk4OhUqJRt5DIQIXC6xWSCD0yWCDghXjiyHymGbbGNJuqtWkPw==
age: 180973
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/chathead/chathead.min.js
200 OK 31 kB URL GET HTTP/2 gateway.jerkmate.com/chathead/chathead.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (30966)
Hash 16f902294080f36ded4c798ece090be2
6c98d13c631c14efcbb6bae59edd5bd0ea4589de
d43749c14955b4e89e29c82cd4ca0b64e86f79e8e7e055bb38de39962892c4ba
GET /chathead/chathead.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 31008
date: Fri, 24 Nov 2023 04:50:49 GMT
server: AmazonS3
last-modified: Tue, 27 Jun 2023 13:31:12 GMT
x-amz-server-side-encryption: AES256
accept-ranges: bytes
test: max-age=300
apigw-requestid: O4vCggf-oAMEV4A=
etag: "16f902294080f36ded4c798ece090be2"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: DPWavL3bew2SAGMYKW_HbU7sJL7iazcDqo262nqiq7ttqhE-pxuIow==
age: 14
X-Firefox-Spdy: h2
gateway.jerkmate.com/wswidget/ws-session-widget.min.js
200 OK 36 kB URL GET HTTP/2 gateway.jerkmate.com/wswidget/ws-session-widget.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type C source, ASCII text, with very long lines (36094), with no line terminators
Hash c06710f1f08d0451be35cdccf64501a6
e6a6b6deef4ac11654ed99a88950f246574578cd
b3ea67a96c89c18865ec2ee16d9041e4025539df8f0bb07d7c4f0011162d606f
GET /wswidget/ws-session-widget.min.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: text/javascript
content-length: 36094
date: Fri, 24 Nov 2023 04:50:49 GMT
server: AmazonS3
last-modified: Mon, 16 Oct 2023 13:09:29 GMT
x-amz-server-side-encryption: AES256
cache-control: max-age=300
accept-ranges: bytes
apigw-requestid: O4vCfjwOIAMEVTw=
etag: "c06710f1f08d0451be35cdccf64501a6"
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: -_UmFeNDqmiCdsyWbE1yaH5dupH8C7o2sNPdqj2rf_J3uzBN2O68Lg==
age: 14
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno-queries/profile?imgParam=WBnG6Z&lang=en
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno-queries/profile?imgParam=WBnG6Z&lang=en
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JSON data\012- , ASCII text, with very long lines (6412)
Hash 8b45613b79b59fadda73f3073369ea63
5c5de0bb364135ae527a8003397b9bbb349ec540
d2bdefbede5866cc3de82553e678e6964f001194c14b3b2ae4313d866c72c0f9
GET /cno-queries/profile?imgParam=WBnG6Z&lang=en HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/json, text/plain, */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1079
date: Fri, 24 Nov 2023 04:51:03 GMT
apigw-requestid: O4vEqiuSoAMEV9A=
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: v6EKit8fw5zrbXT0Vx7c4oa94UTv9iATdocMxqSvAHhAxrYW57yAVw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/gold-coin.svg
200 OK 861 B URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/gold-coin.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (479)
Hash 1327a9157aca30bb7a0b642aaf381710
98e43661030ec672ff2db2298896bd3bcd2cf391
e73c0d04968435fd0836d34f98b52937cdf8dc24e9ec2d23de1cbe6114f5dc05
GET /cno/images/svg/gold-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 861
date: Fri, 24 Nov 2023 04:51:03 GMT
server: nginx/1.17.8
apigw-requestid: O4vEsiOBoAMEPtA=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"6b8-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: M-2uFIGNQq0WVeAbelHnLOI2mTdQC_8JoizxRI3j5GcbyUderSbusg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png
200 OK 9.7 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/favicon/apple-touch-icon.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 180 x 180, 8-bit/color RGBA, non-interlaced\012- data
Hash 1db81ea062c88fc3ceb7ad912c947b64
7df4aa8eadac0fdd0abc3a76fc775b1127edd152
90dc9041d03338343df09df4c75251bede72d757f24fe10ccab4d23ee4a087e8
GET /cno/assets/cno/favicon/apple-touch-icon.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 9714
date: Fri, 24 Nov 2023 04:51:03 GMT
server: nginx/1.17.8
apigw-requestid: O4vEti8XoAMEPDg=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"25f2-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qcUo3PrPm5vRkRs_uJUl1JzGJKNiHUH6Fk156ml27AiiNjy1cPbQOA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png
200 OK 1.0 kB URL GET HTTP/2 gateway.jerkmate.com/cno/assets/cno/favicon/favicon-16x16.png
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type PNG image data, 16 x 16, 8-bit colormap, non-interlaced\012- data
Hash 8edf5f5b5af66f673d8fe60f8f9d6518
20e9ac1a90b684f1b029c7425723cb55412bf245
6a241a5306747918237619dfbd5d2bd975e56f3614a453ed6607fe50cef6c16a
GET /cno/assets/cno/favicon/favicon-16x16.png HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/png
content-length: 1023
date: Fri, 24 Nov 2023 04:51:03 GMT
server: nginx/1.17.8
apigw-requestid: O4vEthlCIAMEVOQ=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"3ff-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Fxcl9fXdLaAtjN0Kujg0iuJouaDQBTb4xirftUIvLiEscmJkdJGtfw==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
200 OK 2.1 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4780), with no line terminators
Hash e5cd75134f7010373f6a4c144c24bec1
8163f4eedc9ad2da72b4dccf2163979c17b9c15b
6b308312eb98c0b75d65cf59029e00d49b5b8d9aa33c10f47e61953633de6d74
GET /cno/_next/static/chunks/pages/2257-6fda0a1a7a85eeeb.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 2086
date: Sat, 18 Nov 2023 01:45:19 GMT
server: nginx/1.17.8
apigw-requestid: OkiPggUMIAMESfg=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"12ac-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: eId-giSIBG9pcmGgiZUCw7lyLSjBrnAR-gGJI9uxL9oE3COnlDMD3A==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
200 OK 1.9 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/antispam-91929b49973764a8.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (4024), with no line terminators
Hash fe2884f1217d2eefc7b16f3bdf80bf8b
0c094e5c2c0ecbd3e8262c01bfa469ddab5a6f85
9e0d3282f6588ff78ec80786aea56be9a97ef010ba32c65ad8e042bb868d4f18
GET /cno/_next/static/chunks/pages/antispam-91929b49973764a8.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Moz: prefetch
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 1931
date: Sat, 18 Nov 2023 01:45:19 GMT
server: nginx/1.17.8
apigw-requestid: OkiPgg-XIAMEamA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"fb8-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: nVPDe3eM7jwjpe6VdJsbw55HQcjPr1zHdzfyeJjK3KAHaCGYn17F7Q==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/1beecdef0f/icone/bonus.svg
200 OK 354 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/1beecdef0f/icone/bonus.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text
Hash 8f262193d91850e63ad9803736bbb037
79273a45967c622fd7eb4fc7dc7f1b990fe95069
741bc535a252b6e8d2a82a5744c09318853932fc9964b6735c99cbca9af0012a
GET /cmscloud/dA/1beecdef0f/icone/bonus.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 354
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=VfPdqO9BJkzoRdJIyfQMye84ZwaQE1FUljnW6HI5CYggG/jzCCjKJr+dChqPjdGOlt1MF0vqLhOZkD2e/Mto+r5xbPa1qmNT1ghYFTgdqczIw5mq+nxJJtK9zm7W; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=VfPdqO9BJkzoRdJIyfQMye84ZwaQE1FUljnW6HI5CYggG/jzCCjKJr+dChqPjdGOlt1MF0vqLhOZkD2e/Mto+r5xbPa1qmNT1ghYFTgdqczIw5mq+nxJJtK9zm7W; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="bonus.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:48:16 +0000
etag: dot:42570b57-b5ed-4e94-90b8-4dd97f5c4647:1653936496000:354
accept-ranges: bytes
access-control-allow-origin: *
apigw-requestid: OkiPdjkmoAMEVwg=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Q-QMXz4zCd8EdNPG0WYKO-JLrZtHg_G7jHummFlyzVHkN1KsaszBQQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg
200 OK 942 B URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/9e1aeb949a/icone/dildo.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (854)
Hash 92e6f2331bd9ca6f9f1b3d0c28354ee2
5a5124ae0f22df154490b1ee42e02e8e610ff7e3
c38a33570931bb0e962a06ad12462fadd87bfcb279ca760cf45760a6f55236c8
GET /cmscloud/dA/9e1aeb949a/icone/dildo.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 942
date: Fri, 24 Nov 2023 04:50:49 GMT
set-cookie: AWSALB=OGjO/zTLckuxeCtLfOWU/x6hOX7XVpMbVagRWERIETem9guZLY0A6rQCbt1FvsJEIdnw/tN1MK/XWB2YeULd3BXJMTICGOa7P409Gc8/J09CvzZAe0nsLciloNQB; Expires=Fri, 01 Dec 2023 04:50:49 GMT; Path=/
AWSALBCORS=OGjO/zTLckuxeCtLfOWU/x6hOX7XVpMbVagRWERIETem9guZLY0A6rQCbt1FvsJEIdnw/tN1MK/XWB2YeULd3BXJMTICGOa7P409Gc8/J09CvzZAe0nsLciloNQB; Expires=Fri, 01 Dec 2023 04:50:49 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="dildo.svg"
expires: Sat, 23 Nov 2024 04:50:49 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:59:00 +0000
etag: dot:96cea090-79a7-4c50-9939-b0ed4042ac8e:1645729140000:942
accept-ranges: bytes
access-control-allow-origin: *
apigw-requestid: O4vClhRVIAMEV6A=
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: x1J8uHxMCZt0dVR5cnGeLcs8mTZ7PGnYwrH5UgShE3QBiLCo8rXNbw==
age: 14
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F
200 OK 1.1 kB URL POST HTTP/2 gateway.jerkmate.com/session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JSON data\012- , Unicode text, UTF-8 text, with very long lines (2976), with no line terminators
Hash e8deacc2c356a56668af03c84e5926c0
0e7d9d40b6e9f1237272366ebc652defe31894ac
d67472f6f5c1cf9a5a24f87fe9a86622c11d9086a20e08e34942c60ccb6adfa6
POST /session-api/ws-session?referer=https%3A%2F%2Fmoartraffic.engine.adglare.net%2F HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Content-Type: text/plain;charset=UTF-8
Content-Length: 1370
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: application/json
content-length: 1139
date: Fri, 24 Nov 2023 04:51:03 GMT
server: nginx/1.19.0
apigw-requestid: O4vExjMHoAMEVYA=
vary: Accept-Encoding
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
access-control-allow-origin: *
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: cGZK4ECdsE4EHTHXRbaJQ6glIQiIjmYEzSRW2CVLWu-bfIe8k2n3VA==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
X-Firefox-Spdy: h2
fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
200 OK 33 kB URL GET HTTP/2 fonts.gstatic.com/s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerGoogle Trust Services LLC
Subject*.gstatic.com
FingerprintE5:79:1F:1A:04:3F:B9:B0:FB:41:4E:B5:E5:97:AD:FE:D9:2C:4A:CD
ValidityMon, 23 Oct 2023 11:24:07 GMT - Mon, 15 Jan 2024 11:24:06 GMT
File type Web Open Font Format (Version 2), TrueType, length 33148, version 1.0\012- data
Hash e88b1871ed8eef59b7df05a91a6f2157
feebf868e5bc28362677fd6e92ac3d41c5c9715e
34208e63c50cc27f5c13b0c29629cf0561fa788f564a07f82cf877dc28e46b82
GET /s/montserrat/v26/JTUSjIg1_i6t8kCHKm459WlhyyTh89Y.woff2 HTTP/1.1
Host: fonts.gstatic.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: identity
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: font
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
accept-ranges: bytes
access-control-allow-origin: *
content-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes
cross-origin-resource-policy: cross-origin
cross-origin-opener-policy: same-origin; report-to="apps-themes"
report-to: {"group":"apps-themes","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/apps-themes"}]}
timing-allow-origin: *
content-length: 33148
x-content-type-options: nosniff
server: sffe
x-xss-protection: 0
date: Thu, 23 Nov 2023 23:27:34 GMT
expires: Fri, 22 Nov 2024 23:27:34 GMT
cache-control: public, max-age=31536000
age: 19409
last-modified: Wed, 13 Sep 2023 22:39:50 GMT
content-type: font/woff2
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
X-Firefox-Spdy: h2
www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c
200 OK 85 kB URL GET HTTP/3 www.googletagmanager.com/gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerGoogle Trust Services LLC
Subject*.google-analytics.com
Fingerprint37:42:10:B7:89:70:45:51:80:81:66:CE:95:21:72:5D:46:0B:E2:34
ValidityMon, 23 Oct 2023 11:18:19 GMT - Mon, 15 Jan 2024 11:18:18 GMT
File type ASCII text, with very long lines (22604)
Hash 15ebf217ae2ff3665b4f40a134700176
ec98dd3a26f18d1de3246be71facc701a86052aa
b7f82ba9e8158f39bc30f00122249b202219fd884322f68cc08622fbed4387d7
GET /gtag/js?id=G-S6XTBZ5V47&l=dataLayer&cx=c HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/3 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Fri, 24 Nov 2023 04:51:03 GMT
expires: Fri, 24 Nov 2023 04:51:03 GMT
cache-control: private, max-age=900
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 85077
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000
hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
200 OK 48 kB URL GET HTTP/2 hw-cdn2.adtng.com/delivery/idsync/idsync.min.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerDigiCert Inc
Subject*.adtng.com
FingerprintE3:A5:72:2C:70:97:86:2D:8A:21:17:4E:DC:02:6A:84:F1:B3:09:40
ValidityFri, 09 Jun 2023 00:00:00 GMT - Tue, 09 Jul 2024 23:59:59 GMT
File type Unicode text, UTF-8 text, with very long lines (47550), with no line terminators
Hash 930adae67545064bc14c6678361c0974
b441eaaac3118e44f3b1300fbdf9bd9d95b046e4
35598acd20349e1fe6a84aad36121c51589e7017a8855ccd3a2409479cdd7d72
GET /delivery/idsync/idsync.min.js HTTP/1.1
Host: hw-cdn2.adtng.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:51:04 GMT
content-type: application/javascript
content-length: 47557
last-modified: Thu, 02 Mar 2023 15:50:17 GMT
expires: Wed, 28 Feb 2024 06:16:08 GMT
cache-control: max-age=10385753
vary: Accept-Encoding
access-control-allow-origin: *
access-control-allow-methods: GET,HEAD,OPTIONS
accept-ranges: bytes
x-cdn-diag: ams5-6577-1-39046-h-0-0---;7100-32-27876----0-0-1
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/a7376915f9/icone/blowjob.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (4373), with CRLF line terminators
Hash f1e13e8593d7049305c94486fb1320fc
577ccfb9cada5b406e1542da7bdcfe3b89319a86
7bcd231a5c1b5013c76e8c033b6cf95b47d894da4fa9d048081674aed1815301
GET /cmscloud/dA/a7376915f9/icone/blowjob.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=Mc98BLRPHyM89MIxB9gCokJjUkUFeFGMtyJryfJhIfU9mYTqJjep/uYZbRXp7/+I3hXn/XIqqF6R5Loi1e2BqkpansdopztxpSRr62cMiqXvhw7+cYxTs5cvRSpz; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=Mc98BLRPHyM89MIxB9gCokJjUkUFeFGMtyJryfJhIfU9mYTqJjep/uYZbRXp7/+I3hXn/XIqqF6R5Loi1e2BqkpansdopztxpSRr62cMiqXvhw7+cYxTs5cvRSpz; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="blowjob.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:47:17 +0000
access-control-allow-origin: *
apigw-requestid: OkiPbjPdIAMEPvQ=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 45QQ1MDR54MHK5uZKFGiX1MPOoMFx5BYPcyFAc_5WGG2d6N9F1lAVQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/789b74db67/poster/April.O.jpg
200 OK 142 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/789b74db67/poster/April.O.jpg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type JPEG image data, JFIF standard 1.02, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1, datetime=2021:08:27 09:34:21], baseline, precision 8, 1920x1080, components 3\012- data
Size 142 kB (141932 bytes)
Hash 15b9224237150f19ceb27ad3e2f024a8
e28d97ad95dae308dbf8ede68786ac6ab3f45343
a6360ce603478028682de735177fb02a855f7543875545bcf38cb8b0afa84001
GET /cmscloud/dA/789b74db67/poster/April.O.jpg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/jpeg
content-length: 141932
date: Fri, 24 Nov 2023 04:51:04 GMT
set-cookie: AWSALB=8Y33IoEjK061nu0l3Ml3L5dxG6mHD9JIClRCvpWaCzeJxT6dAL7/s6BehdT9tNzuzW8B4KmniFk/8HZLKll+J5ZTAcLrhfsz/efNEsUrlQB50caMwgk7SD/rGhz9; Expires=Fri, 01 Dec 2023 04:51:03 GMT; Path=/
AWSALBCORS=8Y33IoEjK061nu0l3Ml3L5dxG6mHD9JIClRCvpWaCzeJxT6dAL7/s6BehdT9tNzuzW8B4KmniFk/8HZLKll+J5ZTAcLrhfsz/efNEsUrlQB50caMwgk7SD/rGhz9; Expires=Fri, 01 Dec 2023 04:51:03 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="April.O.jpg"
expires: Sat, 23 Nov 2024 04:51:03 +0000
cache-control: public, max-age=31536000
last-modified: Fri, 16 Dec 2022 20:54:04 +0000
etag: dot:a4d84244-5d9f-4865-93de-5dcaa4f2e80d:1671224044000:141932
accept-ranges: bytes
apigw-requestid: O4vEygUVIAMEVJg=
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: GbX9-V09uqtM-SEbdmJxoncFD3-7oHOiKAfEaUNWIv3JAooZgzCvBA==
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
rtb2-useast.afkwa.com/universalPixel?account=53338
200 OK 42 B URL GET HTTP/1.1 rtb2-useast.afkwa.com/universalPixel?account=53338
IP
ASN #27257 WEBAIR-INTERNET
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerLet's Encrypt
Subjectafkwa.com
Fingerprint79:36:C0:44:D2:C9:AC:76:30:AC:E4:A7:2D:0F:44:C0:82:A6:F6:07
ValidityWed, 25 Oct 2023 06:37:23 GMT - Tue, 23 Jan 2024 06:37:22 GMT
File type GIF image data, version 89a, 1 x 1\012- data
Hash d89746888da2d9510b64a9f031eaecd5
d5fceb6532643d0d84ffe09c40c481ecdf59e15a
ef1955ae757c8b966c83248350331bd3a30f658ced11f387f8ebf05ab3368629
GET /universalPixel?account=53338 HTTP/1.1
Host: rtb2-useast.afkwa.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Date: Fri, 24 Nov 2023 04:51:04 GMT
Content-Type: image/gif
Content-Length: 42
Connection: keep-alive
Cache-Control: no-store
Age: 0
Pragma: no-cache
gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg
200 OK 2.8 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/8c41111c2a/icone/feet.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1617), with CRLF line terminators
Hash 8cf3c77a814a409507ba19439fd885bb
b0ee4edc60896a1ed8673ebf92232d3b69c79743
a920ad3c7bbc3294afc2979df641db4b00368292546f418e3ffd5cb29628b9d4
GET /cmscloud/dA/8c41111c2a/icone/feet.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=WD4ArU7X3Ddtx0Eq2hfsKz9l9rIziBPGPeUON2iRUTdqa9VXs13xzhBfjY+8fCEW4S7UZxtWAt5ZIg83oKkO39KzA6Xp7xIjRf8UE4W0qZZ5HtSnMWvw1WfwxGdR; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=WD4ArU7X3Ddtx0Eq2hfsKz9l9rIziBPGPeUON2iRUTdqa9VXs13xzhBfjY+8fCEW4S7UZxtWAt5ZIg83oKkO39KzA6Xp7xIjRf8UE4W0qZZ5HtSnMWvw1WfwxGdR; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="feet.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 19:00:22 +0000
access-control-allow-origin: *
apigw-requestid: OkiPbjimIAMEVOw=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: ntZimY-kiE2nm4022kSSM5v1-bik8wBI-BTNxSaZIGLopRTxV_Iccw==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg
200 OK 2.8 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/3b3403f739/icone/ass.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1863), with CRLF line terminators
Hash 3fbb31fa791916947fc389b13659da52
aff6f8d83759996f1986a711abf828d41571f6f4
99cedc197d0222c12a6b6dc0065396f6de47b9d6ec0ee88572428829c818a58b
GET /cmscloud/dA/3b3403f739/icone/ass.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=mz24nsbGc5W3hJNf0diKOi0Ad0n68yWGFgOLLDOsPmhzLq/dbdi59ZnrkUg3pH5CjMgzpFfW/ClP4uR0ltvaZnqRLgrk1l3EXwlLw88MnXHB9pBq84lTn9oj+Ila; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=mz24nsbGc5W3hJNf0diKOi0Ad0n68yWGFgOLLDOsPmhzLq/dbdi59ZnrkUg3pH5CjMgzpFfW/ClP4uR0ltvaZnqRLgrk1l3EXwlLw88MnXHB9pBq84lTn9oj+Ila; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="ass.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:22:38 +0000
access-control-allow-origin: *
apigw-requestid: OkiPbhqoIAMEV5g=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: Kek5onhtneCFZKwvw-Wwdi2v_fLdtYvrmkihsZZetVrFhgCgYE1dVw==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1
206 Partial Content 15 MB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type WebM\012- EBML file, creator webmB\20\012- data
Size 15 MB (15097430 bytes)
Hash 0fb391d740138301173657e14df9f1c1
43b5bc28e4470cb65a4aa9f1cf0896b60a2f27bf
2c4cedb1e8aeebb2f3b487edb03020d62255eec49093e662ef804fec8a1d77dc
Analyzer Verdict Alert YARAhub by abuse.ch malware meth_get_eip
GET /cmscloud/dA/612ef408c9/videoFile1920x1080Webm/Intro-1920X1080.webm?language_id=1 HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5
Accept-Language: en-US,en;q=0.5
Range: bytes=0-
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; _gcl_au=1.1.829226634.1700801467
Sec-Fetch-Dest: video
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Accept-Encoding: identity
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 206 Partial Content
content-type: video/webm
content-length: 15097430
date: Fri, 24 Nov 2023 04:51:04 GMT
set-cookie: AWSALB=oIRfTI4oX77gZgqmzjKn7I1qXzOZeHSpXwu3r/xDxKG0bItc5V7gmmv8fU3J03V6u9zOATCJJGB8AX7ZWtvIefVoadA7Bi6UrHchY+3VY5b1UIVzPqSIs30XhNua; Expires=Fri, 01 Dec 2023 04:51:04 GMT; Path=/
AWSALBCORS=oIRfTI4oX77gZgqmzjKn7I1qXzOZeHSpXwu3r/xDxKG0bItc5V7gmmv8fU3J03V6u9zOATCJJGB8AX7ZWtvIefVoadA7Bi6UrHchY+3VY5b1UIVzPqSIs30XhNua; Expires=Fri, 01 Dec 2023 04:51:04 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="Intro-1920X1080.webm"
expires: Sat, 23 Nov 2024 04:51:04 +0000
cache-control: public, max-age=31536000
last-modified: Fri, 10 Dec 2021 16:23:56 +0000
etag: dot:e1ad0f2a-5872-459d-90a3-bf0c2c4b4ac7:1639153436000:15097430
accept-ranges: bytes
apigw-requestid: O4vEzhrFIAMEVXA=
content-range: bytes 0-15097429/15097430
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: AAHpK4MXOvzP6M0Y4dAQJxSNgAGKwcE5V3cQQjfZu3iV4p-1bIoZ2Q==
referrer-policy: strict-origin-when-cross-origin
vary: Origin
X-Firefox-Spdy: h2
sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
200 OK 36 B URL GET HTTP/2 sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Sat, 23 Nov 2024 04:51:05 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Fri, 24 Nov 2023 04:51:05 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2BDDC40833067EE0B06E0935D65410F672A3BCF565000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
200 OK 36 B URL GET HTTP/2 sync.atsptp.com/d/jsfp/4cb725660c43031e3b06c75892d96c5a
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
GET /d/jsfp/4cb725660c43031e3b06c75892d96c5a HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Sat, 23 Nov 2024 04:51:05 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Fri, 24 Nov 2023 04:51:05 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2BEACFEFC6D05BFBABA7210BAA494B7924F6774528000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
200 OK 36 B URL POST HTTP/2 sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
POST /link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 144
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Sat, 23 Nov 2024 04:51:06 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Fri, 24 Nov 2023 04:51:06 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2B127858F085B0AE456C3FD9C2DD1B37B2EBA8FB06000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
200 OK 36 B URL POST HTTP/2 sync.atsptp.com/link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerLet's Encrypt
Subjectatsptp.com
FingerprintFA:9C:B6:E3:80:79:B1:4C:0A:4F:62:F2:5B:FC:59:2B:7B:5D:DF:91
ValidityTue, 17 Oct 2023 23:28:59 GMT - Mon, 15 Jan 2024 23:28:58 GMT
File type ASCII text, with no line terminators
Hash 3558911d63648b5e1ba3cafc6808b581
5e38b07e8cd6bbc10bbbfec445ff662f1a2058cd
7ced72031459202d78ba2e76d284c9548b0e0c7fc3899b19585136faf7dcb10e
POST /link/4d476c00-13db-a0f5-0ab3-bd39a851979c/origin/a/oldd/4d476c00-13db-a0f5-0ab3-bd39a851979c HTTP/1.1
Host: sync.atsptp.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-type: text/plain
Content-Length: 144
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
TE: trailers
HTTP/2 200 OK
set-cookie: d_uidb=4d476c00-13db-a0f5-0ab3-bd39a851979c; Max-Age=31536000; Expires=Sat, 23 Nov 2024 04:51:06 GMT; Path=/; Domain=sync.atsptp.com; SameSite=Lax
date: Fri, 24 Nov 2023 04:51:06 GMT
access-control-allow-origin: https://cno.jerkmate.com
vary: Origin
access-control-allow-credentials: true
content-type: text/plain
content-length: 36
x-trace: 2BE14143411ACCFEFD95446746C702CBF705D0ACCD000000000000000000
via: 1.1 google
accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg
200 OK 1.5 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/ab5b50d2b1/icone/pussy.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1464), with no line terminators
Hash 5964ccef7a9ef18fe88ac96d14b12ecf
578f521f0df9a268a17176a05c015bbf1eb4df4c
ccede54a86982e2e38aeb96c367e56976b2cca08e2726823080335042ef7b64b
GET /cmscloud/dA/ab5b50d2b1/icone/pussy.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=XRLssDhmYN3DccrcPpFayJkUVsH+xeHdzgHFREinSqQCsfPby306H89PkOxnD9W56zZmDt0W6J4N4Q0EKIF6ll0KvtzY6iApzeZuOT2HJwtSWhwTywN0M4Gz+Xqo; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=XRLssDhmYN3DccrcPpFayJkUVsH+xeHdzgHFREinSqQCsfPby306H89PkOxnD9W56zZmDt0W6J4N4Q0EKIF6ll0KvtzY6iApzeZuOT2HJwtSWhwTywN0M4Gz+Xqo; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="pussy.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 19 Dec 2022 13:29:06 +0000
access-control-allow-origin: *
apigw-requestid: OkiPdhPnoAMEPrQ=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: X1pl2L7yvFx0FA1tgLsYAqdQKcHJmR-8POlQ5OCE318REdafljMnKA==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/42c0118012/icone/licking.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/42c0118012/icone/licking.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2060), with no line terminators
Hash 9629121ba2ff23415304d7d2622bd07a
ad59640f70b80061eac6090eeed086b86e1ca87a
2b4ee0fd4ce738943c894930221a5d4d4443128a057e9eb8d6e309e06a29d493
GET /cmscloud/dA/42c0118012/icone/licking.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 24 Nov 2023 04:51:03 GMT
set-cookie: AWSALB=yqB5h5ySGqYs3w/+kK7VwcHYFVu6x/LLPDJnCG1w9gh3Es5epvytJmkHGh1xCB/szZGseHjPm6gt69vTFp1DkePvaPM9EL6OzFgTlaQ4iyMs6PE2WcLqQbyo5YoF; Expires=Fri, 01 Dec 2023 04:51:03 GMT; Path=/
AWSALBCORS=yqB5h5ySGqYs3w/+kK7VwcHYFVu6x/LLPDJnCG1w9gh3Es5epvytJmkHGh1xCB/szZGseHjPm6gt69vTFp1DkePvaPM9EL6OzFgTlaQ4iyMs6PE2WcLqQbyo5YoF; Expires=Fri, 01 Dec 2023 04:51:03 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="licking.svg"
expires: Sat, 23 Nov 2024 04:51:03 +0000
cache-control: public, max-age=31536000
last-modified: Mon, 30 May 2022 18:46:58 +0000
access-control-allow-origin: *
apigw-requestid: O4vEyjYcoAMEaig=
content-encoding: br
vary: Accept-Encoding
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: qJYrc-IsDsLcuxLlGyr4_5n_EChBT1TcIAmj2EmSYiReC_2EVAPFcQ==
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/6b738c21c0/en-us.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2062), with no line terminators
Hash dbae53392e1bda29fa6da1a4513e5e65
86ca9dae83eb138a2619239611e9e3fd637bbc22
92a20806fe949ff03a34e34eee21468e4b5f93deea1c8219cb2f518108d53ccf
GET /cmscloud/dA/6b738c21c0/en-us.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=G88f/geLSBA5WqlGdrd5eBxpd/Kjf+yNpRbMGghv2QkW7M8mcG7aDK27Jdw0aKE7SrU39XUDdRZksuyF/AiN+V3aERx47G7P1OQSGT+3IF7Dlam896PU6HIHsRRC; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=G88f/geLSBA5WqlGdrd5eBxpd/Kjf+yNpRbMGghv2QkW7M8mcG7aDK27Jdw0aKE7SrU39XUDdRZksuyF/AiN+V3aERx47G7P1OQSGT+3IF7Dlam896PU6HIHsRRC; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="en-us.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: OkiPJhdIoAMEPhA=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: vB3izcHl1HPv4GWokLYMbJ_J1KngoT1Q-gzA5IhidC9aXnZJX4MavQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/images/svg/empty-coin.svg
200 OK 1.2 kB URL GET HTTP/2 gateway.jerkmate.com/cno/images/svg/empty-coin.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- HTML document, ASCII text, with very long lines (1344), with no line terminators
Hash 57695e4620c99ba928ce56a23788008e
9d7ad6c0625215e7df8cef40d8b406e86d2be8a0
3ab19e1a398aa990bec15b35338ff9110a941fd6066082f767e72ee085959fde
GET /cno/images/svg/empty-coin.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Cookie: AWSALB=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+; AWSALBCORS=kJuy9AKf19hq6ACrRex2oOsm6Rf66/Fqn9I3aJsCSm+rrIUuuUoptAEbWJ5wAGRY8kJxcrJcOo959/Kb6LO7dlNPnekDKVYw8viOXX7Qn/Coz4Ax10Ay1pVLQrT+
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
content-length: 635
date: Fri, 24 Nov 2023 04:51:03 GMT
server: nginx/1.17.8
apigw-requestid: O4vEyh0VIAMES0A=
accept-ranges: bytes
cache-control: public, max-age=0
last-modified: Wed, 01 Nov 2023 17:54:56 GMT
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
etag: W/"4cd-18b8c062980"
x-cache: Miss from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hYQL5EgUMs1yovWc4jUnXcJjXg9WsxTOCNDEIJEK6vjslzLYYT_aJg==
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js
200 OK 138 kB URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/361-784cbad91e244c85.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (65536), with no line terminators
Size 138 kB (138153 bytes)
Hash fa5be163d6708407e3fa137d0b404ab9
2bbe86887fa704cd736ba29fbf1490a0b45e56e1
c14636a2e9a19991354462a4dc6431299c166f09aec2c761426c921a7294146d
GET /cno/_next/static/chunks/361-784cbad91e244c85.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 40184
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJhBkoAMEPIA=
cache-control: public, max-age=31536000, immutable
accept-ranges: bytes
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21ba9-18b8c0769d0"
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: NKYT1nGb5N3c7wRXkpqLlXYWQG5kAvVHZIRprZcOudEjdH76Lgggyw==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
cdn.onesignal.com/sdks/OneSignalSDK.js
200 OK 9.2 kB URL GET HTTP/2 cdn.onesignal.com/sdks/OneSignalSDK.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerCloudflare, Inc.
Subjectsni.cloudflaressl.com
Fingerprint68:AF:AC:17:CA:79:7A:8F:ED:F8:D8:57:93:79:CA:FB:69:50:9B:19
ValidityWed, 03 May 2023 00:00:00 GMT - Thu, 02 May 2024 23:59:59 GMT
File type ASCII text, with very long lines (9410), with no line terminators
Hash f068190cb74e61e5328bfd7c3ca7ef36
6dd17281084d0acb9b520721cf55c45c13b7861e
ae199bbb46eabdfd7c526dfbcd5f847960ae41c466ac9669a2bc05f3c6123621
GET /sdks/OneSignalSDK.js HTTP/1.1
Host: cdn.onesignal.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
date: Fri, 24 Nov 2023 04:51:09 GMT
content-type: application/javascript
etag: W/"2a3bbde818bef34d53a0df862ead5d5f"
access-control-allow-headers: OneSignal-Subscription-Id
via: 1.1 google
alt-svc: h3=":443"; ma=86400
cf-cache-status: HIT
age: 2197
expires: Mon, 27 Nov 2023 04:51:09 GMT
cache-control: public, max-age=259200
set-cookie: __cf_bm=P0HRbhSYLMMTNgwCKnt84XgeN7HtneIWnoy_WsBcitA-1700801469-0-ATsxHEI2uC7Dk4CZ7ZkwGApm4x85VSnz/VBvUOX6Ae4TSMJNt7pmVD1Szy+T0rT2iOmgLhJZzDuf5XFTGEI+OWU=; path=/; expires=Fri, 24-Nov-23 05:21:09 GMT; domain=.onesignal.com; HttpOnly; Secure; SameSite=None
vary: Accept-Encoding
strict-transport-security: max-age=15552000; includeSubDomains
server: cloudflare
cf-ray: 82af08fd58a8b50b-OSL
content-encoding: br
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg
200 OK 1.1 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/70eca64a3a/nb.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1161), with no line terminators
Hash 80a983d82b53f93b865f98962a32cd84
178e04acfc3e82694899d777e0f262646b205df1
1bdb8cac916a63618e3c423ce865c42110400b1b5eecb1981da52f9a7bd0bf1a
GET /cmscloud/dA/70eca64a3a/nb.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:17 GMT
set-cookie: AWSALB=2H0Fl7ZZgqHNgYn1aNV2PdHAkGyVJLRVoM53jLAj1DIH7DJOwaO3w82Dzr4kHzKShrTjmCQSWhgsWWSKWPW5CgFciy2wrzS/jACqQ4MSa2Y1RYjKcrUrQtQZCrBM; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/
AWSALBCORS=2H0Fl7ZZgqHNgYn1aNV2PdHAkGyVJLRVoM53jLAj1DIH7DJOwaO3w82Dzr4kHzKShrTjmCQSWhgsWWSKWPW5CgFciy2wrzS/jACqQ4MSa2Y1RYjKcrUrQtQZCrBM; Expires=Sat, 25 Nov 2023 01:45:17 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="nb.svg"
expires: Sun, 17 Nov 2024 01:45:17 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 22 Apr 2021 12:46:01 +0000
apigw-requestid: OkiPJgeboAMESHA=
content-encoding: br
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: hPyPyG7kqDxO8Ppt-laSuWwOyuad66exoY2jrKNnt7c45OOrK88WbA==
age: 529544
referrer-policy: strict-origin-when-cross-origin
vary: Accept-Encoding, Origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg
200 OK 1.5 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/af79c4e71f/icone/boobs.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (1557), with no line terminators
Hash 6e3c8bc16795694c7b6346574e6c34c1
ee2e92404871c871adf8e2d55e411e23b95e2d1e
5d44e057858dfb1f46569f63cbdd8f418beeab88f38db89bb7ec4984e868e281
GET /cmscloud/dA/af79c4e71f/icone/boobs.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Sat, 18 Nov 2023 01:45:19 GMT
set-cookie: AWSALB=jOIea97b1DEcIWMTckaKxFRVSDxWWxcYHTJGs3IRlzZ8j3OGVmIxsA1vHb1lC26Q9Stv5d4t8jnPSNc6HXC+UK52kqbMHR0lgZhep6FzqmAIHTpDk8+nF+d7Avti; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/
AWSALBCORS=jOIea97b1DEcIWMTckaKxFRVSDxWWxcYHTJGs3IRlzZ8j3OGVmIxsA1vHb1lC26Q9Stv5d4t8jnPSNc6HXC+UK52kqbMHR0lgZhep6FzqmAIHTpDk8+nF+d7Avti; Expires=Sat, 25 Nov 2023 01:45:19 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="boobs.svg"
expires: Sun, 17 Nov 2024 01:45:19 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:57:43 +0000
access-control-allow-origin: *
apigw-requestid: OkiPbiXaoAMEPEw=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: VAW09JEkkj9x5MyxJhr7AxVrCZ-CoLRjK7SyQxUCKS-WPw11sxWbwQ==
age: 529544
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js
200 OK 538 B URL GET HTTP/2 gateway.jerkmate.com/cno/_next/static/chunks/pages/index-97876df10145b412.js
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type ASCII text, with very long lines (542), with no line terminators
Hash c6af5e80b6f89269f33eb86b2b23c0dc
dddc81f83803c05f17e8875f26e1f8e677ad288b
63784a148cb230fbdd8fc63b8a039952717c81a4c5bcace9e630e09fa55207eb
GET /cno/_next/static/chunks/pages/index-97876df10145b412.js HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
DNT: 1
Connection: keep-alive
Referer: https://cno.jerkmate.com/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
content-length: 334
date: Sat, 18 Nov 2023 01:45:17 GMT
server: nginx/1.17.8
apigw-requestid: OkiPJirBIAMEPhw=
cache-control: public, max-age=31536000, immutable
last-modified: Wed, 01 Nov 2023 17:56:18 GMT
etag: W/"21a-18b8c0769d0"
strict-transport-security: max-age=15724800; includeSubDomains
content-encoding: gzip
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: 7h5saFvJFgGFotSzV0DmtKekZ9XcZXmoyxIj30sBmqkGx8qfiE0wtQ==
age: 529544
x-xss-protection: 1; mode=block
x-frame-options: SAMEORIGIN
referrer-policy: strict-origin-when-cross-origin
x-content-type-options: nosniff
vary: Accept-Encoding,Accept-Encoding, Origin
X-Firefox-Spdy: h2
t.ajump1.com/2779/4551?aff_click_id=61099636-c5a3-4400-ad92-0ff80f96befe&source=55036+&xk=c0a1202090707070ad222b14ab63026b&hts_id=61099636-c5a3-4400-ad92-0ff80f96befe&i18n_country=NO
303 See Other 86 kB URL User Request GET HTTP/2 t.ajump1.com/2779/4551?aff_click_id=61099636-c5a3-4400-ad92-0ff80f96befe&source=55036+&xk=c0a1202090707070ad222b14ab63026b&hts_id=61099636-c5a3-4400-ad92-0ff80f96befe&i18n_country=NO
IP
Certificate IssuerAmazon
Subjectajump1.com
Fingerprint75:54:D3:08:87:41:44:8C:53:DF:30:74:6A:D7:A1:65:3B:69:E0:3D
ValidityWed, 01 Feb 2023 00:00:00 GMT - Fri, 01 Mar 2024 23:59:59 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /2779/4551?aff_click_id=61099636-c5a3-4400-ad92-0ff80f96befe&source=55036+&xk=c0a1202090707070ad222b14ab63026b&hts_id=61099636-c5a3-4400-ad92-0ff80f96befe&i18n_country=NO HTTP/1.1
Host: t.ajump1.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 303 See Other
content-type: text/html; charset=utf-8
content-length: 572
location: https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
server: nginx/1.19.0
date: Fri, 24 Nov 2023 04:51:01 GMT
set-cookie: aff_ran_url_8481=30110; Path=/; Expires=Sat, 25 Nov 2023 04:51:01 GMT; Secure
enc_aff_session_8481=ENC03d1a1fe7adee7e35da8bec981b9802acc0f15e65c041c8ab5f4f372acb121c9bb5729f63e71b3cbd19e352b71e8629ae7480a338b5852528ec96fb107f2954309e4bfebd15c0767e0674b915abf0b72548ce81f2f9a5fb8d18df8fd221898e9d48ae7162ea30b96ea3ee618934ebd0bd3af9e565489ae983492de758d708f627737f3a882a17a8c9ea575c68da88f8edb7847d86ee5f9db83dda51c29e23ae7b1ab1f339e56f9b16292bac97bf62159152c44a9aeeab94e0ae5436a6513aba43002ebaee5; Path=/; Expires=Sun, 23 Nov 2025 04:51:01 GMT; Secure
ho_mob=eyJtb2JpbGVfZGV2aWNlX29zIjoiRGVza3RvcCIsIm1vYmlsZV9kZXZpY2VfbW9kZWwiOiJGaXJlZm94IiwibW9iaWxlX2RldmljZV9icmFuZCI6Ik1vemlsbGEiLCJtb2JpbGVfYnJvd3NlciI6IkZpcmVmb3ggRGVza3RvcCIsIm1vYmlsZV9icm93c2VyX3ZlcnNpb24iOiIxMTEuMCIsIm1vYmlsZV9jYXJyaWVyIjoiPyIsInVzZXJfYWdlbnQiOiJNb3ppbGxhLzUuMCAoWDExOyBMaW51eCBYODZfNjQ7IFJ2OjEwOS4wKSBHZWNrby8yMDEwMDEwMSBGaXJlZm94LzExMS4wIiwiY29ubmVjdGlvbl9zcGVlZCI6ImJyb2FkYmFuZCJ9; Path=/; Expires=Sun, 18 Oct 2026 15:31:01 GMT; Secure
tracking_id: 102816ced8c458f3cb6258e01794fc
vary: Accept
strict-transport-security: max-age=15724800; includeSubDomains
x-cache: Miss from cloudfront
via: 1.1 92c4bb210eab82a152000047d3609a02.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
alt-svc: h3=":443"; ma=86400
x-amz-cf-id: RvH8DTxGkvm6dD7_i65slPMn-1lD0_Ucf0Z8aBnnv3xhD4b_sUgWjA==
X-Firefox-Spdy: h2
cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
200 OK 86 kB URL User Request GET HTTP/2 cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
IP
Certificate IssuerLet's Encrypt
Subjectcno.jerkmate.com
Fingerprint60:C3:88:CE:3E:80:A9:BE:C9:A9:97:68:5C:76:1F:E7:A5:49:16:31
ValidityTue, 26 Sep 2023 10:18:09 GMT - Mon, 25 Dec 2023 10:18:08 GMT
Hash d41d8cd98f00b204e9800998ecf8427e
da39a3ee5e6b4b0d3255bfef95601890afd80709
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110 HTTP/1.1
Host: cno.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://moartraffic.engine.adglare.net/
DNT: 1
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
server: nginx/1.17.8
date: Fri, 24 Nov 2023 04:51:01 GMT
content-type: text/html; charset=utf-8
x-nextjs-cache: HIT
x-powered-by: Next.js
etag: "84k5dl6pje1u19"
cache-control: s-maxage=600, stale-while-revalidate
vary: Accept-Encoding
content-encoding: gzip
strict-transport-security: max-age=15724800; includeSubDomains
X-Firefox-Spdy: h2
gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg
200 OK 2.0 kB URL GET HTTP/2 gateway.jerkmate.com/cmscloud/dA/565c6ec629/icone/spank.svg
IP
Requested by https://cno.jerkmate.com/?transaction_id=102816ced8c458f3cb6258e01794fc:8481&aff_id=2779&source=55036+&ov=hide&name=1&img=WBnG6Z&url=7&xid=jm-hpf-8481-jmlcom&flow=confirm&wallet=50&actions=0&pop=no&landing_id=30110
Certificate IssuerAmazon
Subject*.jerkmate.com
Fingerprint1B:31:53:6C:6F:44:FD:AF:16:85:89:97:56:76:AB:9E:00:E2:E4:66
ValidityMon, 27 Mar 2023 00:00:00 GMT - Wed, 24 Apr 2024 23:59:59 GMT
File type SVG Scalable Vector Graphics image\012- , ASCII text, with very long lines (2060), with no line terminators
Hash a14d3e9b27c801899ff38bbc2828d453
613e22ea39e91d64f20838c306e1a9c1dc061300
365d1e15c08c5f6a32d52369082583ffad239f9d611c687845e1b24b5707b736
GET /cmscloud/dA/565c6ec629/icone/spank.svg HTTP/1.1
Host: gateway.jerkmate.com
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:109.0) Gecko/20100101 Firefox/111.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Referer: https://cno.jerkmate.com/
Origin: https://cno.jerkmate.com
DNT: 1
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-site
Pragma: no-cache
Cache-Control: no-cache
HTTP/2 200 OK
content-type: image/svg+xml
date: Fri, 24 Nov 2023 04:50:49 GMT
set-cookie: AWSALB=6/xzaQ4wGn48X4Zi1VK3QjZl3jnqfpnXUTyISW5XSE/04XuBkYajpzcs/eMX2jh2Uu1c7OU2JHg7PS9qF3KkX2/wMY6JnnHBDUhsel8xZXYBIGbhPnvNqb2bApHl; Expires=Fri, 01 Dec 2023 04:50:49 GMT; Path=/
AWSALBCORS=6/xzaQ4wGn48X4Zi1VK3QjZl3jnqfpnXUTyISW5XSE/04XuBkYajpzcs/eMX2jh2Uu1c7OU2JHg7PS9qF3KkX2/wMY6JnnHBDUhsel8xZXYBIGbhPnvNqb2bApHl; Expires=Fri, 01 Dec 2023 04:50:49 GMT; Path=/; SameSite=None; Secure
strict-transport-security: max-age=3600;includeSubDomains
x-frame-options: SAMEORIGIN
x-content-type-options: nosniff
x-xss-protection: 1; mode=block
content-disposition: inline; filename="spank.svg"
expires: Sat, 23 Nov 2024 04:50:49 +0000
cache-control: public, max-age=31536000
last-modified: Thu, 24 Feb 2022 18:58:00 +0000
access-control-allow-origin: *
apigw-requestid: O4vClj_eIAMEVJg=
content-encoding: br
vary: Accept-Encoding
x-cache: Hit from cloudfront
via: 1.1 db0992ba349fc51d5151ec8330e36c28.cloudfront.net (CloudFront)
x-amz-cf-pop: OSL50-P1
x-amz-cf-id: dAT8iYDB2x2zQ3KvLI-V-OlAgIvZCQXP8-K2W9rGtYwiOAYD6Z7S6g==
age: 14
referrer-policy: strict-origin-when-cross-origin
X-Firefox-Spdy: h2
143.204.55.40
104.18.214.59
213.227.142.34
188.114.97.1
0.0.0.0